Med Plug RX
Division 01Regenerative MedicineUmbilical-derived exosome and cellular preparations, counted and characterized per lot, supplied to a closed physician register.Enter Regenerative MedicineDivision 02PeptidesSeventy-three pharmaceutical-manufactured peptides, pre-filled in a certified injector pen. No vial, no reconstitution.Enter Peptides
Legal · United States

Privacy Notice

How We Handle Your Information

What this website collects when you apply for a physician account or refer a colleague, who receives it, and how to have it removed.

Effective September 1, 2026

Who we are

Med Plug RX is a United States distributor of research-use-only umbilical-derived cellular and exosome preparations, supplied only to licensed physicians and qualified facilities. This notice covers medplugrx.com. For any question about it, email info@medplugrx.com.

What we collect

Your physician account application. The application on our Physician Access page asks for your name, practice or facility, specialty, NPI number, state of licensure, email address, phone number, city, and the preparations you are interested in. We use these to verify that you are a licensed practitioner and to open and service an account.

Professional referrals. If you introduce a colleague through our referral page, we collect your contact details and theirs, and we ask you to confirm that you have their permission before you send it.

Technical information. Our hosting provider records standard web server information, including IP address. We use the IP address of a submission to limit how many times the same connection can submit a form in a short window. That is an anti-spam measure; the counter is short-lived and is not used to build a profile of you.

What we do not collect

This website is not a channel for patient information. Do not submit patient names, dates of birth, diagnoses, treatment histories, medical record numbers, images identifying a patient, or insurance details through any form, and do not include them in email to us. Our forms are configured to refuse submissions carrying patient data fields, and anything of that kind that reaches us anyway will be deleted.

We do not take payment through this website, so no card or bank details are collected here.

We ask for your NPI number rather than a state medical licence number. The NPI is the public identifier designed for exactly this verification and is searchable in the NPPES registry, which keeps a more sensitive credential out of an email inbox while still confirming you are who you say you are.

Why we use it, and who sees it

Applications and referrals are delivered by email to info@medplugrx.com and to the account manager assigned to you, so that a person can verify your licensure and respond. We use the information to verify eligibility, to open and service an account, and to send the documentation you asked for.

We do not sell your information, and we do not share it with advertisers or data brokers.

A small number of service providers process this information on our behalf and only for these purposes: Vercel (website hosting), Resend (delivery of the notification email), and our email provider. We may also disclose information where the law requires it, or to protect the security and integrity of the site.

How long we keep it

  • Applications that do not become accounts — up to 24 months, then deleted.
  • Referrals where the person asked not to be contacted — deleted promptly, except a minimal record so we do not contact them again.
  • Active account correspondence — for the term of the relationship and any period we are required to keep records.
  • Anti-spam rate-limit counters — minutes, not days.
  • Patient information reaching us by mistake — deleted on discovery.

These are our operating policies rather than statutory periods, and they may be adjusted on legal advice.

HIPAA

Med Plug RX is a distributor of research materials, not a healthcare provider, and this website is deliberately built so that it never receives protected health information. We therefore do not describe ourselves as HIPAA compliant on the strength of this site; the accurate statement is that our professional application and referral channels are not intended for patient information of any kind. If a future arrangement ever required us to handle protected health information on behalf of a covered entity, that would be governed by a separate written agreement.

Your choices

You can ask us what we hold about you, correct it, or delete it — email info@medplugrx.com and we will act on it. If a colleague referred you and you would rather not be contacted, tell us and we will remove your details. Depending on where you live you may have additional rights under laws such as the Texas Data Privacy and Security Act, the California Consumer Privacy Act, or the GDPR; we honour those requests regardless of whether a particular law applies to you.

Security

The site is served over HTTPS, form submissions are origin-checked and rate-limited, and applications are delivered to a controlled business mailbox. No method of transmission over the internet is completely secure, so please use judgment about what you send through a web form.

Children

This is a business-to-business website for licensed professionals. It is not directed to children and we do not knowingly collect information from anyone under 18.

Changes

If this notice changes materially we will update the effective date above and post the revised version here.

Contact

Med Plug RX — info@medplugrx.com — Houston, Texas, United States. See also our Terms of Use.